From: Manos Antonakakis antonakakis@gmail.com @ 
Subject: Need some help 
Date: August 20, 2016 at 12:17 AM 
To: DeJong, Steve Steve. DeJong@neustar.biz 
Ce: Rodney Joffe rjoffe@centergate.com 
Bec: antonakakis@gmail.com 


Hey Steve, 
You know that if you are getting an encrypted email with Rodney CCed, in the middle of the night, something is up. 


I will need you to pull all data you have (UltraDNS, TLDs, ccTLDs, and especially the data from the “Secondary” dataset we talked 
about in May), for the following zones and IP addresses: 


trump-email.com 
29.133.216.66.in-addr.arpa 


af-people.ru 
afpeople.ru 
alfa-auto-credit.ru 
alfa-bank. biz 
alfa-bank.com 
alfa-bank.info 
alfa-bank.org 
alfa-bank.ru 
alfa-bank.su 
alfa-bank.tel 
alfa-capital.biz 
alfa-card.ru 
alfa-check.ru 
alfa-click.ru 
alfa-direct.ru 
alfa-direct.su 
alfa-finance.com 
alfa-finance.ru 
alfa-fx.com 
alfa-fx.ru 
alfa-ipoteca.ru 
alfa-ipoteka.ru 
alfa-labs.ru 
alfa-leasing.ru 
alfa-life.ru 
alfa-people.ru 
alfa-portal.ru 
alfa-usa.com 
alfa.bank 
alfa.care 
alfa.love 
alfabank.biz 
alfabank.com 
alfabank.me 
alfabank.org 
alfabank.ru 
alfabank.st 
alfabank.su 
alfabank.tv 
alfacapital.biz 
alfacapital.info 
alfacard.ru 
alfacards.ru 
alfacheck.ru 
alfaclick.ru 
alfadirect.net 
alfadirect.ru 
alfadirect.su 
alfafellows.ru 
alfafinance.biz 
alfafinance.ru 
alfaforyou.ru 
alfafuture.com 


alfafitiura rit 
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CONFIDENTIAL 


SATA ret 


alfafuturepeople.ru 

alfafx.com 

alfafx.ru 

alfaintra.net 

alfaipoteca.ru 

alfaipoteka.ru 

alfalabs.ru 

alfaleasing.ru 

alfalife.ru 

alfamobile.ru 

alfapensia.ru 

alfapension.ru 

alfaportal.ru 

alformacap.com 

alformacapital.com 

besprogula.ru 

beta-bank.com 

bezprogula.ru 

bezprogyla.ru 

cardspromo.ru 

debet-card.ru 

debetcard.ru 

internetbank.ru 

kazna.ru 

kredity-bystro.ru 

kreditybystro.ru 

mancard.ru 

opperevod.ru 

telephonebank.ru 

vremyazhit.ru 

xn-----6kcabf4a1 bbd0a1anmda1b9j1a.xn--p1ai 
xn----7sba7ajbcd1 fzd.xn--p1 ai 
xn----7sbaae0a7abdxzmida9azkza.xn--p1 ai 
xn----7sbab3cddpcg8an¢ji1kj.xn--p1ai 
xn----7sbabaf4csc6abwcOav 1 kuc.xn--p1ai 
xn----7sbabe3cjffu6d5e.xn--p1 ai 
xn----7sbabeSccu2d5d.xn--p1ai 
xn----7sbabez8aadyymida9azkza.xn--p1ai 
xn----7sbaby7aj3cn8a1c.xn--p1ai 
xn----7sbabyrpd4aj8as7h.xn--p1 ai 
xn----7sbanka1 aloSbxb9f.xn--p1 ai 
xn----7sbantfbtcx4exe.xn--p1ai 
xn----7sbarfqs6e9csb.xn--p1 ai 
xn----7sbarfrpc3cwao9g.xn--p1ai 
xn—--7sbavzc7d0a5b.xn--p1 ai 
xn---7sbbaQ0ayci6berd4n.xn--p1ai 
xn----ctbjfkvOav4gza.xn--p1ai 
xn-80aa2aajibsep.xn--p1ai 
xn-80aaa3SbdencfSamciisji.xn--p1 ai 
xn-80aaadOccr6c0d.xn--p1ai 
xn-80aaad5biees1d1e.xn--p1ai 
xn-80aaadveaadvwikda7a2jxa.xn--p1ai 
xn-80aaamyleuhuuub3i.xn--p1 ai 
xn--80aaarezbv5afq6m.xn--p1ai 
xn--80aaatondO0ai5ar9g.xn--p1 ai 
xn--80aacpuirdulm2dxc.xn--p1ai 
xn--80aajpebrbv8ate.xn--ptai 
xn--80aameonc7bun1g.xn--p1ai 
xn-80aapuc8cwa1b.xn--p1ai 
xn--80aayhbcc3e9c.xn--p1 ai 

xn--b1 agdisws4fxa.xn—ptai 


dcleaks.com 
orderbox-dns.com 


and 
217.12.97.15 


217.12.96.15 
167.73.110.8 


Subject to Protective Order 


Antonakakis Gmail 00000721 
SC-00000733 


For the domain names, | want “everything” you see at the domain name and any child label under these zones. 
Many thanks Sir! 


Rodney, please approve this. 


Manos Antonakakis | manos @gatech.edu 
Georgia Institute of Technology 
FF7D 4FDF 9115 8077 92D2 5B59 5120 5E89 BE1B 3668 
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